People have discussed implementing this but at the moment you have to explicitly map principals, including group principals, to roles.
thanks david jencks On Mar 21, 2011, at 6:50 AM, Shenghao Fang wrote: > Hi All, > > I'm finding a way to map all groups in the realm to roles without > explicitly defining them in the deployment descriptor. > I searched the web and it looks like Geronimo supports such function. > But I didn't find any document about it. > Could anyone give any sample? Thanks. > > > -- > Michael
